Oracle Linux 10 : ncurses (ELSA-2026-5913)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-5913 advisory. 6.4-15.20240127 - fix buffer overflow in infocmp -i CVE-2025-69720 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 8 : virt:ol / and / virt-devel:ol (ELSA-2026-5578)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-5578 advisory. - Limit recursion in ri-records CVE-2021-3622 resolves: rhbz1976194 libguestfs - Fixes: CVE-2022-40284 - Fix CVE-2024-7383 NBD server improper certificate...

Oracle Linux 8 : mysql:8.0 (ELSA-2026-5580)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-5580 advisory. mecab 0.996-2.12 - Bump version for 'mysql' module rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'AppStream' repo -...

Oracle Linux 10 : golang (ELSA-2026-5941)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-5941 advisory. 1.25.8-1 - Update to Go 1.25.8 fips-1 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...

Oracle Linux 8 : firefox (ELSA-2026-5932)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-5932 advisory. 140.9.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 140.9.0 - Add debranding patches Mustafa Gezen - Add OpenELA default...

Oracle Linux 9 : firefox (ELSA-2026-5930)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-5930 advisory. 140.9.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

Oracle Linux 10 : freerdp (ELSA-2026-5939)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-5939 advisory. 2:3.10.3-5.3 - Backport several CVE fixes Resolves: RHEL-151975, RHEL-152202 Tenable has extracted the preceding description block directly from the...

Oracle Linux 9 : golang (ELSA-2026-5942)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-5942 advisory. 1.25.8-2 - Update to Go 1.25.8 fips-1 - Resolves: RHEL-157451 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : glibc (ELSA-2026-50174)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50174 advisory. - CVE-2025-15281: wordexp WRDEREUSE uninitialized memory read RHEL-142787 - CVE-2026-0915: Stack memory disclosure in getnetbyaddr RHEL-141849 -...

Oracle Linux 9 : nginx (ELSA-2026-5599)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-5599 advisory. - Resolves: RHEL-146525 - nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections CVE-2026-1642 - Resolves: RHEL-84477 - nginx:...

Oracle Linux 9 : mysql:8.4 (ELSA-2026-5640)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-5640 advisory. mecab 0.996-3.4 - Bump version for package rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo - Resolves: 2182069...

python3 security update

3.6.8-74.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8.openela.0 - Add openela to supported dists 3.6.8-74 - Security fix for CVE-2025-0938 Resolves: RHEL-153235...

Oracle Linux 8 : nginx:1.24 (ELSA-2026-5581)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-5581 advisory. - Resolves: RHEL-146517 - nginx:1.24/nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections CVE-2026-1642 - Resolves: RHEL-12728 -...

Oracle Linux 9 : opencryptoki (ELSA-2026-5603)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-5603 advisory. 3.25.0-4.2 - Resolves: RHEL-144820, Privilege Escalation or Data Exposure via Symlink Following Tenable has extracted the preceding description block directly...

Oracle Linux 9 : vim (ELSA-2026-5602)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-5602 advisory. 8.2.2637-23.0.1.el97.1 - Remove upstream references Orabug: 31197557 2:8.2.2637-23.1 - RHEL-147940 CVE-2026-25749 vim: Heap Overflow in Vim Tenable has extracte...

Oracle Linux 8 : opencryptoki (ELSA-2026-5587)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-5587 advisory. 3.22.0-3.2 - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following Tenable has extracted the preceding description...

Oracle Linux 8 : 389-ds:1.4 (ELSA-2026-5513)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-5513 advisory. - Resolves: RHEL-137074 - CVE-2025-14905 389-ds:1.4/389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow rhel-8.10.z...

Oracle Linux 8 : gnutls (ELSA-2026-5585)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-5585 advisory. 3.6.16-8.5 - Backport the fixes for CVE-2025-9820 and CVE-2025-14831 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 8 : python3 (ELSA-2026-5588)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-5588 advisory. 3.6.8-74.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8.openela.0 - Add openela to supported dists 3.6.8-74 - Security fix for...

Oracle Linux 10 : yggdrasil-worker-package-manager (ELSA-2026-5145)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-5145 advisory. 0.2.3-4 - Bump release for rebuild Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...